Security update for SUSE Manager 4.3: Server security fixes

Announcement ID: SUSE-SU-2023:1830-1
Rating: moderate
References:
Affected Products:
  • SUSE Manager Proxy 4.3
  • SUSE Manager Proxy 4.3 Module 4.3
  • SUSE Manager Retail Branch Server 4.3
  • SUSE Manager Server 4.3
  • SUSE Manager Server 4.3 Module 4.3

An update that has four security fixes can now be installed.

Security update for SUSE Manager Server 4.3

Description:

This update fixes the following issues:

spacewalk-java:

  • Version 4.3.52-1
  • Add more restricted arguments to prevent HTTP API logging sensitive data (bsc#1209386, bsc#1209395)

spacewalk-web:

  • Version 4.3.29-1
  • Fix datepicker appearing behind modal edge (bsc#1209703)
  • Fix datepicker layout shift on Highstate pages

How to apply this update:

  1. Log in as root user to the SUSE Manager Server.
  2. Stop the Spacewalk service: spacewalk-service stop
  3. Apply the patch using either zypper patch or YaST Online Update.
  4. Start the Spacewalk service: spacewalk-service start

Recommended update for SUSE Manager Proxy and Retail Branch Server 4.3

Description:

This update fixes the following issues:

spacewalk-web:

  • Version 4.3.29-1
  • Fix datepicker appearing behind modal edge (bsc#1209703)
  • Fix datepicker layout shift on Highstate pages

How to apply this update:

  1. Log in as root user to the SUSE Manager Proxy or Retail Branch Server.
  2. Stop the proxy service: spacewalk-proxy stop
  3. Apply the patch using either zypper patch or YaST Online Update.
  4. Start the Spacewalk service: spacewalk-proxy start

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Manager Proxy 4.3 Module 4.3
    zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2023-1830=1
  • SUSE Manager Server 4.3 Module 4.3
    zypper in -t patch SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-1830=1

Package List:

  • SUSE Manager Proxy 4.3 Module 4.3 (noarch)
    • spacewalk-base-minimal-config-4.3.29-150400.3.18.1
    • spacewalk-base-minimal-4.3.29-150400.3.18.1
  • SUSE Manager Server 4.3 Module 4.3 (noarch)
    • spacewalk-java-4.3.52-150400.3.41.3
    • spacewalk-java-lib-4.3.52-150400.3.41.3
    • spacewalk-java-postgresql-4.3.52-150400.3.41.3
    • spacewalk-base-minimal-4.3.29-150400.3.18.1
    • spacewalk-html-4.3.29-150400.3.18.1
    • spacewalk-java-config-4.3.52-150400.3.41.3
    • spacewalk-base-4.3.29-150400.3.18.1
    • spacewalk-base-minimal-config-4.3.29-150400.3.18.1
    • spacewalk-taskomatic-4.3.52-150400.3.41.3

References: